What is the CVSS score of CVE-2013-0477?

CVE-2013-0477 has a CVSS 2.0 base score of 6.0 (Medium). CVSS vector: AV:N/AC:M/Au:S/C:P/I:P/A:P. EPSS exploitation probability: 0.4%.

Infosphere Master Data Management Collaboration Server CVE-2013-0477

MEDIUM

Cross-site Scripting (XSS) (CWE-79)

2013-02-21 psirt@us.ibm.com

IBM XSS Infosphere Master Data Management Collaboration Server Infosphere Master Data Management Server For Product Information Management

6.0

CVSS 2.0 · NVD

Severity by source

NVD PRIMARY

6.0 MEDIUM

AV:N/AC:M/Au:S/C:P/I:P/A:P

Primary rating from NVD · only source for this CVE.

CVSS VectorNVD

AV:N/AC:M/Au:S/C:P/I:P/A:P

Attack Vector

Network

Attack Complexity

Confidentiality

Integrity

Availability

Lifecycle Timeline

CVE Published

Feb 21, 2013 - 01:55 cve.org

MEDIUM 6.0

DescriptionCVE.org

Multiple cross-site scripting (XSS) vulnerabilities in IBM InfoSphere Master Data Management - Collaborative Edition 10.0 and 10.1 before FP1 and InfoSphere Master Data Management Server for Product Information Management 6.0, 9.0, and 9.1 allow remote authenticated users to inject content, and conduct phishing attacks, via unspecified vectors.

AnalysisAI

Multiple cross-site scripting (XSS) vulnerabilities in IBM InfoSphere Master Data Management - Collaborative Edition 10.0 and 10.1 before FP1 and InfoSphere Master Data Management Server for Product. Rated medium severity (CVSS 6.0), this vulnerability is remotely exploitable. No vendor patch available.

Technical ContextAI

This vulnerability is classified as Cross-Site Scripting (XSS) (CWE-79), which allows attackers to inject malicious scripts into web pages viewed by other users. Multiple cross-site scripting (XSS) vulnerabilities in IBM InfoSphere Master Data Management - Collaborative Edition 10.0 and 10.1 before FP1 and InfoSphere Master Data Management Server for Product Information Management 6.0, 9.0, and 9.1 allow remote authenticated users to inject content, and conduct phishing attacks, via unspecified vectors. Affected products include: Ibm Infosphere Master Data Management Collaboration Server, Ibm Infosphere Master Data Management Server For Product Information Management.

RemediationAI

No vendor patch is available at time of analysis. Monitor vendor advisories for updates. Sanitize all user input, use Content-Security-Policy headers, encode output contextually (HTML, JS, URL). Use frameworks with built-in XSS protection.